Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use local captcha #14933

Closed
ghost opened this issue Aug 12, 2020 · 6 comments
Closed

Use local captcha #14933

ghost opened this issue Aug 12, 2020 · 6 comments

Comments

@ghost
Copy link

ghost commented Aug 12, 2020

Since many browsers and addons, especially those closely related to a privacy and open-source focussed community like matrix.org, block third-party tracking content, using recaptcha.net does not work:

image

Describe the solution you'd like
Use a local captcha

Describe alternatives you've considered
https://alternativeto.net/software/recaptcha/

@ghost ghost added the T-Enhancement label Aug 12, 2020
@t3chguy
Copy link
Member

t3chguy commented Aug 12, 2020

Duplicate of #3606

Given that Element runs entirely in your browser, it cannot use a Local captcha as it has to use the one the service the user is trying to connect to is asking for.

@t3chguy t3chguy closed this as completed Aug 12, 2020
@ghost
Copy link
Author

ghost commented Aug 13, 2020

Given that Element runs entirely in your browser, it cannot use a Local captcha as it has to use the one the service the user is trying to connect to is asking for.

By "local" I am referring to the host, not the client.

@t3chguy
Copy link
Member

t3chguy commented Aug 13, 2020

Well the host again is not Element, you can run Element from your filesystem using a naive web server.

@ghost
Copy link
Author

ghost commented Aug 13, 2020

In which case the host would be the local system running said web server.

Anyway, enough talk of semantics, I thought you didn't understand the point here but it's clear that it's well understood that recaptcha is a privacy and security problem, and shouldn't be used. This has all been covered in the three year old issue of which you marked this as a dupe. I'd continue the conversation there but it's all been said already ad after that amount of time it's clear that there's no solution in sight.

@t3chguy
Copy link
Member

t3chguy commented Aug 13, 2020

In which case the host would be the local system running said web server.

Given the web server would just be hosting static files and unable to perform any captcha validation that is not possible.

Element is just a client. If you're connecting to a website using your favourite web client (browser) that browser doesn't get to choose which Captcha you use, the service you're connecting to does.

@ghost
Copy link
Author

ghost commented Aug 13, 2020

Of course it's possible, how do you think the other captcha services do it? Magic space voodoo? No, it's a web server.

that browser doesn't get to choose which Captcha you use, the service you're connecting to does.

Exactly, and the service I connected to, chose spyware, hich is bad, and it's all been covered in the other thread.

You seem to just want to argue and like I said, it's terrible the way it works now, it's been a known issue for over three years and it's all been said. I don't need to continue this conversation and there's no way you can defend it. Unsubbed.

@element-hq element-hq locked as too heated and limited conversation to collaborators Aug 14, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

1 participant